Your network contains an Active Directory domain named contoso.com. All domain controllers run Windows Server 2012. The domain contains two servers. The
servers are configured as shown in the following table.
Server1 and Server2 host a load-balanced website named Web1. Web1 runs by using an application pool named WebApp1. WebApp1 uses a group Managed
Service Account named gMSA1 as its identity. Domain users connect to Web1 by using either the name webl.contoso.com or the alias myweb.contoso.com. You
discover the following:
* When the users access Web1 by using webl.contoso.com, they authenticate by using Kerberos.
* When the users access Web1 by using myweb.contoso.com, they authenticate by using NTLM.
You need to ensure that the users can authenticate by using Kerberos when they connect by using myweb.contoso.com. What should you do?
Modify the properties of the WebApp1 application pool.
Run the Add-ADComputerServiceAccount cmdlet.
Modify the properties of the Web1 website.
Modify the properties of the gMSA1 service account.